Lucene search
+L

6 matches found

CNVD
CNVD
•added 2025/01/10 12:00 a.m.•10 views

Online Shoe Store details2.php file SQL Injection Vulnerability

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the id parameter in the /details2.php page that lacks validation of externally-entered SQL statements. An attacker can exploit this vulnerability to execute illegal...

9.8CVSS8.3AI score0.00529EPSS
SaveExploits1References1
OSV
OSV
•added 2025/01/04 9:15 a.m.•7 views

CVE-2025-0205

A vulnerability classified as critical has been found in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /details2.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

9.8CVSS6.4AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2025/01/04 9:00 a.m.•39 views

CVE-2025-0205 code-projects Online Shoe Store details2.php sql injection

A vulnerability classified as critical has been found in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /details2.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.5CVSS0.00529EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/01/04 12:00 a.m.•18 views

PT-2025-3778 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical vulnerability has been found in the code-projects Online Shoe Store. It affects an unknown function of the file /details2.php. The manipulation of the id argument leads to SQ...

9.8CVSS8.1AI score0.00529EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/04 12:00 a.m.•3 views

CVE-2025-0205: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /details2.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

9.8CVSS5.5AI score0.00529EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/03/18 12:00 a.m.•3 views

CVE-2002-1462: Undefined Security Weakness

details2.php in OrganicPHP PHP-affiliate 1.0, and possibly later versions, allows remote attackers to modify information of other users by modifying certain hidden form fields...

5CVSS5.8AI score0.01481EPSS
SaveExploits0References1
Rows per page
Query Builder